Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
File: 3139312e362e38302e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: +dOOesp9nQKCBWRAfdq9QRWiqNlfqR16LkY+xJyFfvg=
Subject key identifier: 86:56:8B:10:E2:D1:7C:2B:78:49:E4:FC:EB:D2:E4:EB:47:2C:77:65
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 2B6E21099EEE51980C23FE5562B3921EC20BB707
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 191.6.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6e:21:09:9e:ee:51:98:0c:23:fe:55:62:b3:92:1e:c2:0b:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=86568B10E2D17C2B7849E4FCEBD2E4EB472C7765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:96:27:10:9f:2d:61:31:5f:3c:2c:eb:f1:
c1:9d:91:d0:5c:9c:63:cb:71:7e:50:2f:8c:88:65:
12:1e:23:64:2a:9d:14:13:a0:45:1a:b7:48:48:78:
a0:c5:fe:00:96:56:44:46:9c:d2:f5:b8:ec:1a:13:
28:6f:12:fd:d0:4d:d9:cf:08:8b:3d:c9:20:64:80:
8e:38:c2:df:30:a8:c3:98:45:c0:af:7e:14:ce:5e:
42:51:01:c0:18:c3:5a:a7:34:b2:7f:3e:32:2a:b8:
a6:97:6d:7c:3e:32:77:f7:9a:c7:44:7e:5f:2a:ea:
f1:c1:42:4f:b9:52:c3:a0:a0:cb:9a:cb:3a:be:d1:
75:a5:03:a4:29:20:92:45:02:4e:16:51:2a:ca:43:
08:85:b4:c4:57:c3:e1:86:0f:f3:09:ba:73:1c:5c:
b1:6d:d3:c2:59:3d:c0:fb:87:10:87:e5:8d:9d:d7:
44:a2:c0:72:ea:16:ac:3c:d5:ab:43:08:bb:c3:ba:
e5:8a:38:5c:f6:60:75:0c:f7:21:de:47:e7:c8:82:
0f:9d:17:cc:7c:02:c6:eb:99:50:dc:8c:1e:19:d7:
8b:4b:3d:84:bc:9b:e6:8b:cc:f6:5d:b7:af:8e:2f:
0a:45:de:2b:1b:31:32:2b:a6:b3:4f:a8:25:fd:1a:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:56:8B:10:E2:D1:7C:2B:78:49:E4:FC:EB:D2:E4:EB:47:2C:77:65
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.6.80.0/21
Signature Algorithm: sha256WithRSAEncryption
21:4f:34:fb:34:f8:59:3f:62:e4:98:fc:a5:41:64:58:a2:c5:
55:2b:84:2c:d8:29:e7:e6:ee:de:40:93:9f:d4:6c:15:0e:5e:
25:d6:98:8b:a8:f5:e7:76:3e:d0:12:82:b4:81:e2:73:b2:66:
ee:89:63:04:81:8e:58:88:db:c8:eb:37:5c:b9:38:e2:75:1f:
ec:12:d3:4f:e8:fc:cf:ae:e5:a6:f5:e6:48:3e:48:be:d8:27:
a3:0c:7e:f6:78:5a:2d:25:7b:c8:5b:07:f6:00:12:5b:ed:89:
2c:d4:a6:d8:f6:6d:b5:6d:c9:b1:61:fe:ef:c2:1a:2a:42:2b:
e7:ec:f6:58:fc:95:af:21:ad:c2:7c:b4:03:83:68:58:15:b1:
00:32:96:96:10:9f:98:fc:93:f7:92:ad:bd:7d:ce:36:69:81:
2b:b5:36:51:60:78:4f:ae:6c:a0:6b:84:0d:83:86:aa:c4:b2:
59:ba:68:88:ae:e7:df:94:a3:f5:21:06:25:fd:cc:46:a3:5a:
cd:dc:6b:13:03:1c:0a:f4:4b:e0:6e:2e:f4:92:5c:48:f8:2f:
e3:7f:9b:26:57:71:86:1f:f4:54:95:38:07:5b:6d:8d:10:fe:
f2:e1:5f:76:61:9f:38:c8:e0:c6:87:0b:c9:b0:d4:2c:5e:2f:
67:27:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:40:14 2025 by rpki-client